The School of Electrical Engineering and Computer Science (EECS) CS/ECE Applied Cryptography Dr. Attila Altay Yavuz Big Picture and Organization Applied Cryptography Dr. Attila Altay Yavuz1Winter 2016

OSU EECS Dr. Attila Altay Yavuz 2 Outline (current lecture) Self-introduction Course Objectives ( overview) –Touching important problems and tools (name & functionality) –Grading –Requirements Example Project Topics –Decision on your topic, assess your background/commitment

OSU EECS Dr. Attila Altay Yavuz 3 Self-Intro Assistant Professor, EECS at Oregon State University Adjunct Faculty, University of Pittsburgh (Jan now) Research Scientist, Bosch Research Center (Dec Aug. 2014) –Develop security and privacy research programs –Privacy-preserving Big Data Technologies (~1M) –Secure Internet-of Things and Systems (~250K) Ph.D., North Carolina State University (Jan Aug. 2011) –Compromise Resilient and Compact Crypto for Digital Forensics MS, Bogazici University ( ) –Efficient Crypto Mechanisms for Military Ad-hoc Networks

OSU EECS Dr. Attila Altay Yavuz 4 Self-Intro (Cont’) Research Interests: Applied cryptography, network security, privacy Academic Collaborations: Upitt, UNC, UCI, Purdue-CIT, CMU Industry Collaborations: Bosch, Oracle, Cisco, SEI-CMU, ISE Some Impact Examples: ECU Privacy-Preserving Medical Databases (HCTM, 2016) Secure Intra-car Networks (OEMs, 2018)

OSU EECS Medium term Long term Near term Big Picture: Technology Trends & Vision Smart-infrastructures and distributed systems Big Data Technologies Cloud-based Applications Smart Home Inter vehicular networks Smart-grid Smart-city Digitalized Healthcare Inf. Sys. 5

Challenges of Security and Privacy in IoTS Requirements and Challenges Cloud-based Services Smart-home and WSNs Heterogeneity Vehicular networks (e.g., Car-2-X) High Performance/Scalability Data Availability Interconnectivity 6 SOMETHING MISSING?

Need for Privacy Enhancing Technologies 7 Privacy Breaches: Big Data and IoTS

OSU EECS Cyber Physical Systems - Vulnerabilities Reliable Cyber-Physical Systems (e.g., smart-grid) are vital – Susceptible: Northeast blackout (2003), 50 million people, $10 billion cost – Attacks: False data injection [Yao CCS09’], over 200 cyber-attacks in 2013 Vulnerability: Commands and measurements are not authenticated Requirements for a security method – Real-time  Extremely fast processing (a few ms) – Limited bandwidth  Compact – Several components  Scalability Limitations of Existing Methods – PKC is not yet feasible (computation, storage, tag size) – Symmetric crypto is not scalable (key management ) 8

OSU EECS Security Challenges for Smart-Infrastructures (II) 9 Internet ECU Vulnerability: Commands and measurements are not authenticated Security for Inter-car Networks – Manipulate direction/velocity, crashes Security for Intra-car Networks – Large attack surface [Usenix '11] – ECUs of break/acceleration, airbag Challenges – Strict safety requirements – Limited bandwidth, real-time processing The state-of-art cannot address (as discussed) Inter-car and Intra-car Networks

OSU EECS Pillars and Target Topics Please check course website for material and Syllabus! Pillar I-II: Authentication and Integrity – Broadcast Authentication: Internet, wireless net., multi-media, … Vehicular networks, power-grid, smart-grid, drones… – Specialized Signatures: Real-time, compromise-resilient, hybrid, … Pillar III: Privacy (Confidentiality) and Functionality – Privacy Enhancing Technologies – Cloud computing and data outsourcing: SE, ORAM, Garbled Circuits, OT Pillar IV: Availability and Resiliency (time permits) – Denial of Service (Client-server application) – 10

OSU EECS Background Requirements A previously taken cryptography/network security class is a must –CS 419 Introduction to Network Security –CS 519 Special Topics on Crypto/NetSec –CS 419 Cryptography (Mike Rosulek) –CS/ECE 419 Computer Security (Rakesh Bobba) –No such course  Please drop this course A good programming skill is a necessary –Very good C/C++ experience, Linux –Java/C# may be ok (but C/C++ rules the crypto world, for good reasons!) Experience on mobile devices is required for some projects How to achieve more in less than two months? –Form sub-teams and integrate them into my research group –Enforce background requirement –Volunteers to continue after the course

OSU EECS High-Level Objectives (PETS Track) Dynamic Symmetric Searchable Encryption (DSSE) (1 lecture) Privacy in Cognitive Radios (1 lecture) –LPOS scheme, DB-based approaches, Anti-jamming Hybrid Cryptography via Signcryption –Signcrypt >> Sign + encrypt Oblivious Random Access Memory (2 lecture) –Basic ORAM, Partition ORAM, Path ORAM –Novel ORAM constructions with highly efficient constants Oblivious Dynamic Searchable Encryption (1 lecture) –A multi-server approach

OSU EECS High-Level Objectives (Authentication Track) Structure-Free Compact Authentication & HW acceleration –Vehicular networks, theory to practice Broadcast Authentication (2 lectures) –TESLA: Playing with time factor  efficient authentication –EMSS: Address non-repudiation and sync. issues Counter DoS: Client-Server Puzzles (2 lectures, optional) –Hash-based –DLP-based Student Presentations

OSU EECS Student Presentations Depends on the size of the class Students with no prior presentation opportunity will be prioritized. Two high-quality paper to be presented. One base paper and one the most recent progress paper  See course website about requirements Topics to be selected: –Garbled Circuits –Oblivious Transfer –Privacy-preserving data mining I and II (two students 4 papers) –NTRU cryptosystem –Cost benefit analysis of PETs –Mobile system security –OS security

OSU EECS Depends on class-size, most qualified selected, first come first served Searchable Encryption (3 student), Thang: –GPU implementation (GPU experience) –Mobile-device implementation (Android or Apple), prior experience –Open-source porting, Dropbox and Amazon integration (network programming) Oblivious Random Access Memory (2), Gabriel: –Reasonable math and C/C++ background A Survey and cost analysis for PETs (2), Gungor: SPHINCS, Merkle-tree based signatures and traditional signature suite (3) (me) –Good implementation skills and crypto background PhD students are encourage to continue their own research. Send your previous courses and skillsets to project leads or me 15 Potential Projects and Presentations

OSU EECS PhD students can purse their own research as a part of the course –Please coordinate with your advisor. Prior projects (from Fall 2015) continues so no change is needed Class project is different then co-authoring, which requires: –Contribution well-beyond class –Continuous involvement, completing all aspects, active writing efforts –Potentially 4-6 months more work after the class! But well-worth if you commit 16 Potential Projects and Presentations

OSU EECS In-class paper presentation, %35 (subject to change) –See potential topics at the webpage –Full lecture style (or a single paper style) + question preparation Research Project or survey/implementation, %55 (subject to change) –Discussions with the team leader –Bi-weekly short reports to me (all together) –Discussion and agenda for deliverables and grading accordingly Class attendance/participation %10 Please let me know if you will continue this course by this week You are expected to conduct your research independently.You are expected to conduct your research independently. 17 Grading